- cypherpunks-legacy - lists.cpunks.org

Re: Versign creates man-in-the-middle attack on DNS
by Scott Guthery 16 Sep '03

16 Sep '03

Let's see ... you type in a URL that isn't working and you are immediately bound by a long list of conditions ... AGREEMENT TO BE BOUND. By using the service(s) provided by VeriSign under these Terms of Use, you acknowledge that you have read and agree to be bound by all terms and conditions here in and documents incorporated by reference. Makes the RIAA look like Mother Teresa. Cheers, Scott ----- Original Message ----- From: "R. A. Hettinga" <rah(a)shipwright.com> To: cypherpunks(a)lne.com X-Orig-To: "Philodox Clips" <clips(a)philodox.com> Sent: Tuesday, September 16, 2003 12:37 AM Subject: Re: Versign creates man-in-the-middle attack on DNS > > --- begin forwarded text > > > Status: U > Date: Tue, 16 Sep 2003 15:04:51 +1200 (NZST) > Subject: Re: Versign creates man-in-the-middle attack on DNS > From: "Kerry Thompson" <cypher(a)crypt.gen.nz> > To: "Tim May" <timcmay(a)got.net> > Cc: cypherpunks(a)lne.com > User-Agent: SquirrelMail/1.4.1 > Sender: owner-cypherpunks(a)lne.com > > Tim May said: > > > > I didn't get a Verisign page...I go the usual error. > > > > "Could not open the page http://www.thisisjunk55666.com/ because the > > server www.thisisjunk55666.com could not be found." > > > > Try http://www.thisisjunk55666.net - I think .com hasn't been switched or > hasn't propagated yet. > > Result is an ugly Verisign search engine page. > > Kerry > > --- end forwarded text > > > -- > ----------------- > R. A. Hettinga <mailto: rah(a)ibuc.com> > The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> > 44 Farquhar Street, Boston, MA 02131 USA > "... however it may deserve respect for its usefulness and antiquity, > [predicting the end of the world] has not been found agreeable to > experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Mexifornia Driver's License
by Tim May 15 Sep '03

15 Sep '03

<http://vikingphoenix.com/immigration/davis_sign_illegal.htm>

3 2

"Quicksilver": It's about time...
by R. A. Hettinga 15 Sep '03

15 Sep '03

<http://seattletimes.nwsource.com/cgi-bin/PrintStory.pl?document_id=20017290…> Monday, September 15, 2003, 12:00 A.M. Pacific <snip> It's about time: So what upcoming product launch are geeks most excited about? Not the new version of Microsoft Office. It's probably fine. But techdom is really champing at the bit for the Sept. 23 release of "Quicksilver," the latest book from Seattle author Neal Stephenson, who has been described as the hacker Hemingway. "Quicksilver" is the long-awaited follow-up to Stephenson's 1999 bestseller "Cryptonomicon," which ranged through the genesis of computers, World War II cryptography and modern Web privacy and security issues. Among Quicksilver's characters is a brilliant scientist and contemporary of Isaac Newton. -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

GPG Sig test
by Mark Renouf 15 Sep '03

15 Sep '03

Can someone verify this message? Someone told me that my signatures were coming up invalide for some reason. I just created a new key recently (old one expired months ago). I just uploaded it to keyserver.pgp.net Thanks! -- Mark Renouf <mark(a)tweakt.net> [demime 0.97c removed an attachment of type application/pgp-signature which had a name of signature.asc]

5 5

Police state
by Major Variola (ret.) 15 Sep '03

15 Sep '03

Good article at http://wired.com/news/conflict/0,2100,60440,00.html on abuses of anti-terrorism (tm) laws. ----- The unit of coercivity for magstrips is being changed to the "Ashcroft"

1 0

Police state
by Major Variola (ret.) 15 Sep '03

15 Sep '03

Good article at http://wired.com/news/conflict/0,2100,60440,00.html on abuses of anti-terrorism (tm) laws. ----- The unit of coercivity for magstrips is being changed to the "Ashcroft"

1 0

snooping cell phone pictures via URLs?
by Major Variola (ret) 15 Sep '03

15 Sep '03

I received a few URLs pointing to cell phone pictures stored at pictures.sprintpcs.com. The URLs contained long seemingly-random strings, though with my sample (of 2) I only saw 5 identical characters in the same locations. Has anyone done any less casual cryptanalysis on these kind of URLs? One wonders how much protection from (non-sprintpcs.com and ISP) snoopers that the "random" strings actually provide. ---- A fool and their bits are soon mirrored worldwide.

1 0

Re: Wired misquote [Symantec want's to criminalize full-disclosure] (fwd from alfred_huger@symantec.com)
by Eugen Leitl 15 Sep '03

15 Sep '03

----- Forwarded message from Alfred Huger <alfred_huger(a)symantec.com> -----

1 0

Killing the persecutors of "Extreme Associates"
by Anonymous 15 Sep '03

15 Sep '03

Prosecutors, U.S. Attorneys and Attorneys General who seek to throw people in prison for half a century for the "crime" of producing a porn movie with the "wrong" type of storyline all need to be gang-raped to the theme of _The O'Reilly Factor_ by large-penised men, before having themselves, their families and their children doused with jet fuel and burned alive, September 11th style. "'Shall make no law' means _NO LAW_. Got it, bitch?" If not, perhaps somebody should take a Sharpie, use it to write out the relevant text of the First Amendment on a piece of plain white paper, affix it to a baseball bat with tape or another suitable adhesive, and then smash aforementioned baseball bat over the heads of these U.S. Attorneys and high- ranking "Justice" Department officials until they either get the idea, or get their skulls crushed to such a degree that bloodied brain tissue ends up splattered all over the walls of their offices. Robert Zicari and Janet Romano should seriously consider putting out contracts on the heads of some Feds.

2 1

Cypherpunks List Info
by cpunk＠lne.com 14 Sep '03

14 Sep '03

Cypherpunks Mailing List Information Last updated: Sep 12, 2002 This message is also available at http://www.lne.com/cpunk Instructions on unsubscribing from the list can be found below. 0. Introduction The Cypherpunks mailing list is a mailing list for discussing cryptography and its effect on society. It is not a moderated list (but see exceptions below) and the list operators are not responsible for the list content. Cypherpunks is a distributed mailing list. A subscriber can subscribe to one node of the list and thereby participate on the full list. Each node (called a "Cypherpunks Distributed Remailer", although they are not related to anonymous remailers) exchanges messages with the other nodes in addition to sending messages to its subscribers. A message posted to one node will be received by the list subscribers on the other nodes, and vice-versa. 1. Filtering The various CDRs follow different policies on filtering spam and to a lesser extent on modifying messages that go to/from their subscribers. Filtering is done, on nodes that do it, to reduce the huge amount of spam that the cypherpunks list is subjected to. There are three basic flavors of filtering CDRs: "raw", which send all messages to their subscribers. "cooked" CDRs try to eliminate the spam on that's on the regular list by automatically sending only messages that are from cypherpunks list subscribers (on any CDR) or people who are replying to list messages. Finally there are moderated lists, where a human moderator decides which messages from the raw list to pass on to subscribers. 2. Message Modification Message modification policy indicates what modifications, if any, beyond what is needed to operate the CDR are done (most CDRs add a tracking X-loop header on mail posted to their subscribers to prevent mail loops). Message modification usually happens on mail going in or out to each CDR's subscribers. CDRs should not modify mail that they pass from one CDR to the next, but some of them do, and others undo those modifications. 3. Privacy Privacy policy indicates if the list will allow anyone ("open"), or only list members, or no one ("private") , to retrieve the subscribers list. Note that if you post, being on a "private" list doesn't mean much, since your address is now out there. It's really only useful for keeping spammers from harvesting addresses from the list software. Digest mode indicates that the CDR supports digest mode, which is where the posts are batched up into a few large emails. Nodes that support only digest mode are noted. 4. Anonymous posting Cypherpunks encourages anonymous posting. You can use an anonymous remailer: http://www.andrebacard.com/remail.html http://anon.efga.org/Remailers http://www.gilc.org/speech/anonymous/remailer.html or you can send posts to the list via cpunks_anon(a)einstein.ssz.com and your mail's headers will be stripped before posting. Note that this doesn't provide complete anonymity since the receiving site will still have log file entries showing the source of the mail (or you have to trust that they delete them). You also will be 'sharing' a reputation with the other entities that post through this alias, and some of them are spammers, so some subscribers will have this alias filtered. 5. Unsubscribing Unsubscribing from the cypherpunks list: Since the list is run from a number of different CDRs, you have to figure out which CDR you are subscribed to. If you don't remember and can't figure it out from the mail headers (hint: the top Received: line should tell you), the easiest way to unsubscribe is to send unsubscribe messages to all the CDRs listed below. How to figure out which CDR you are subscribed to: Get your mail client to show all the headers (Microsoft calls this "internet headers"). Look for the Sender or X-loop headers. The Sender will say something like "Sender: owner-cypherpunks(a)lne.com". The X-loop line will say something like "X-Loop: cypherpunks(a)lne.com". Both of these inticate that you are subscribed to the lne.com CDR. If you were subscribed to the algebra CDR, they would have algebra.com in them. Once you have figured out which CDR you're subscribed to, look in the table below to find that CDRs unsubscribe instructions. 6. Lunatics, spammers and nut-cases "I'm subscribed to a filtering CDR yet I still see lots of junk postings". At this writing there are a few sociopaths on the cypherpunks list who are abusing the lists openness by dumping reams of propaganda on the list. The distinction between a spammer and a subscriber is nearly always very clear, but the dictinction between a subscriber who is abusing the list by posting reams of propaganda and a subscriber who is making lots of controversial posts is not clear. Therefore, we tolerate the crap. Subscribers with a low crap tolerance should check out mail filters. Procmail is a good one, although it works on Unix and Unix-like systems only. Eudora also has a capacity for filtering mail, as do many other mail readers. An example procmail recipie is below, you will of course want to make your own decisions on which (ab)users to filter. # mailing lists: # filter all cypherpunks mail into its own cypherspool folder, discarding # mail from loons. All CDRs set their From: line to 'owner-cypherpunks'. # /dev/null is unix for the trash can. :0 * ^From.*owner-cypherpunks@.* { :0: * (^From:.*ravage@ssz\.com.*|\ ^From:.*jchoate@dev.tivoli.com.*|\ ^From:.*mattd@useoz.com|\ ^From:.*proffr11@bigpond.com|\ ^From:.*jei@cc.hut.fi) /dev/null :0: cypherspool } 7. List of current CDRs All commands are sent in the body of mail unless otherwise noted. --------------------------------------------------------------------------- Algebra: Operator: Subscription: "subscribe cypherpunks" to majordomo(a)algebra.com Unsubscription: "unsubscribe cypherpunks" to majordomo(a)algebra.com Help: "help cypherpunks" to majordomo(a)algebra.com Posting address: cypherpunks(a)algebra.com Filtering policy: raw Message Modification policy: no modification Privacy policy: ??? Info: ??? --------------------------------------------------------------------------- CCC: Operator: drt(a)un.bewaff.net Subscription: "subscribe [password of your choice]" to cypherpunks-request(a)koeln.ccc.de Unsubscription: "unsubscribe <password>" to cypherpunks-request(a)koeln.ccc.de Help: "help" to to cypherpunks-request(a)koeln.ccc.de Web site: http://koeln.ccc.de/mailman/listinfo/cypherpunks Posting address: cypherpunks(a)koeln.ccc.de Filtering policy: This specific node drops messages bigger than 32k and every message with more than 17 recipients or just a line containing "subscribe" or "unsubscribe" in the subject. Digest mode: this node is digest-only NNTP: news://koeln.ccc.de/cbone.ml.cypherpunks Message Modification policy: no modification Privacy policy: ??? --------------------------------------------------------------------------- Infonex: Subscription: "subscribe cypherpunks" to majordomo(a)infonex.com Unsubscription: "unsubscribe cypherpunks" to majordomo(a)infonex.com Help: "help cypherpunks" to majordomo(a)infonex.com Posting address: cypherpunks(a)infonex.com Filtering policy: raw Message Modification policy: no modification Privacy policy: ??? --------------------------------------------------------------------------- Lne: Subscription: "subscribe cypherpunks" to majordomo(a)lne.com Unsubscription: "unsubscribe cypherpunks" to majordomo(a)lne.com Help: "help cypherpunks" to majordomo(a)lne.com Posting address: cypherpunks(a)lne.com Filtering policy: cooked Posts from all CDR subscribers & replies to threads go to lne CDR subscribers. All posts from other CDRs are forwarded to other CDRs unmodified. Message Modification policy: 1. messages are demimed (MIME attachments removed) when posted through lne or received by lne CDR subscribers 2. leading "CDR:" in subject line removed 3. "Reply-to:" removed Privacy policy: private Info: http://www.lne.com/cpunk; "info cypherpunks" to majordomo(a)lne.com Archive: http://archives.abditum.com/cypherpunks/index.html (thanks to Steve Furlong and Len Sassaman) --------------------------------------------------------------------------- Minder: Subscription: "subscribe cypherpunks" to majordomo(a)minder.net Unsubscription: "unsubscribe cypherpunks" to majordomo(a)minder.net Help: "help" to majordomo(a)minder.net Posting address: cypherpunks(a)minder.net Filtering policy: raw Message Modification policy: no modification Privacy policy: private Info: send mail to cypherpunks-info(a)minder.net --------------------------------------------------------------------------- Openpgp: [openpgp seems to have dropped off the end of the world-- it doesn't return anything from sending help queries. Ericm, 8/7/01] Subscription: "subscribe cypherpunks" to listproc(a)openpgp.net Unsubscription: "unsubscribe cypherpunks" to listproc(a)openpgp.net Help: "help" to listproc(a)openpgp.net Posting address: cypherpunks(a)openpgp.net Filtering policy: raw Message Modification policy: no modification Privacy policy: ??? --------------------------------------------------------------------------- Ssz: Subscription: "subscribe cypherpunks" to majordomo(a)ssz.com Unsubscription: "unsubscribe cypherpunks" to majordomo(a)ssz.com Help: "help cypherpunks" to majordomo(a)ssz.com Posting address: cypherpunks(a)ssz.com Filtering policy: raw Message Modification policy: Subject line prepended with "CDR:" Reply-to cypherpunks(a)ssz.com added. Privacy policy: open Info: http://www.ssz.com/cdr/ --------------------------------------------------------------------------- Sunder: Subscription: "subscribe" to sunder(a)sunder.net Unsubscription: "unsubscribe" to sunder(a)sunder.net Help: "help" to sunder(a)sunder.net Posting address: sunder(a)sunder.net Filtering policy: moderated Message Modification policy: ??? Privacy policy: ??? Info: ??? --------------------------------------------------------------------------- Pro-ns: Subscription: "subscribe cypherpunks" to majordomo(a)pro-ns.net Unsubscription: "unsubscribe cypherpunks" to majordomo(a)pro-ns.net Help: "help cypherpunks" to majordomo(a)pro-ns.net Posting address: cypherpunks(a)pro-ns.net Filtering policy: cooked Posts from all CDR subscribers & replies to threads go to local CDR subscribers. All posts from other CDRs are forwarded to other CDRs unmodified. Message Modification policy: 1. leading "CDR:" in subject line removed 2. "Reply-to:" removed Privacy policy: private Info: http://www.pro-ns.net/cpunk

1 0